81 lines
6.6 KiB
XML
81 lines
6.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="680" height="1334" viewBox="0 0 680 1334" role="img" aria-labelledby="diagram-title diagram-description">
|
|
<title id="diagram-title">회전 경쟁에서 이긴 요청도 진다</title>
|
|
<desc id="diagram-description">revokeRefreshToken 을 켜고 refreshTokenMaxReuse 를 0 으로 둔 상태에서 같은 refresh token 으로 동시에 5건을 보냈다. 순차로 돌리면 재현되지 않으며 백그라운드로 띄우고 wait 해야 경합이 생긴다. 이긴 요청이 받은 새 토큰조차 쓸 수 없었다. Keycloak 이 경쟁을 감지하면 client session 을 지우기 때문이다.</desc>
|
|
<metadata>{"techviz":{"spec_version":"1.1","id":"b3-rotation-contention","profile":"component-flow"},"source_context":{"document":"docs/keycloak-session-store/final/document.md","document_sha256":"28aef96a2bbb94fbb10ade26a71238fee62a5a4d9fa6e7749ae98cfd0a65e560","anchor":{"kind":"heading","value":"B-3 · Refresh Token Rotation 경쟁 (Q2)","line":806}},"evidence_policy":"Each factual element cites source lines or is marked assumption.","diagram_only":true}</metadata>
|
|
<defs>
|
|
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
|
|
<path d="M 0 0 L 10 5 L 0 10 z" />
|
|
</marker>
|
|
<style>
|
|
:root { color-scheme: light; }
|
|
text { font-family: Inter, Pretendard, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; fill: #111827; }
|
|
.canvas { fill: #ffffff; }
|
|
.group-box { fill: #ffffff; stroke: #9ca3af; stroke-width: 1.4; stroke-dasharray: 7 5; }
|
|
.group-label-bg { fill: #ffffff; }
|
|
.group-label { font-size: 13px; font-weight: 650; fill: #374151; }
|
|
.edge { fill: none; stroke: #374151; stroke-width: 1.8; stroke-linejoin: round; stroke-linecap: round; marker-end: url(#arrow); }
|
|
.edge.style-dashed, .edge.semantic-dashed, .edge.assumption { stroke-dasharray: 7 5; }
|
|
.edge.style-dotted { stroke-dasharray: 2 5; }
|
|
.edge.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
|
|
.edge.emphasis-muted { stroke: #9ca3af; }
|
|
.edge.emphasis-warning, .edge.kind-failure, .edge.kind-error { stroke: #dc2626; stroke-width: 2.2; }
|
|
.edge-label-bg { fill: #ffffff; }
|
|
.edge-label { font-size: 12px; font-weight: 560; text-anchor: middle; }
|
|
.node-shape { fill: #ffffff; stroke: #4b5563; stroke-width: 1.7; }
|
|
.node-shape.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
|
|
.node-shape.emphasis-muted { stroke: #9ca3af; fill: #f9fafb; }
|
|
.node-shape.emphasis-warning { stroke: #d97706; stroke-width: 2; fill: #fffdf5; }
|
|
.node-shape.kind-database, .node-shape.kind-datastore, .node-shape.kind-storage { fill: #f8fafc; }
|
|
.node-shape.kind-queue, .node-shape.kind-event, .node-shape.kind-topic { fill: #fafafa; }
|
|
.node-shape.assumption { stroke-dasharray: 4 4; }
|
|
.storage-bottom, .controller-divider { fill: none; stroke: #4b5563; stroke-width: 1.4; }
|
|
.controller-led { fill: #4b5563; }
|
|
.actor-symbol { fill: none; stroke: #4b5563; stroke-width: 1.8; stroke-linecap: round; }
|
|
.actor-symbol.emphasis-primary { stroke: #2563eb; stroke-width: 2.2; }
|
|
.node-label { font-size: 14px; font-weight: 650; text-anchor: middle; }
|
|
.node-role { font-size: 10px; letter-spacing: 0.04em; text-anchor: middle; fill: #6b7280; }
|
|
.node-detail-divider { stroke: #d1d5db; stroke-width: 1; }
|
|
.node-detail { font-size: 11px; fill: #374151; }
|
|
.assumption-badge { font-size: 9px; font-weight: 700; fill: #92400e; }
|
|
.failure-mark { stroke: #dc2626; stroke-width: 4; stroke-linecap: round; }
|
|
.lifeline { stroke: #9ca3af; stroke-width: 1.2; stroke-dasharray: 5 5; }
|
|
.timeline-axis { stroke: #374151; stroke-width: 1.8; marker-end: url(#arrow); }
|
|
.timeline-stem { stroke: #6b7280; stroke-width: 1.3; }
|
|
.timeline-marker { fill: #ffffff; stroke: #374151; stroke-width: 1.7; }
|
|
.timeline-marker.primary { fill: #2563eb; stroke: #2563eb; }
|
|
.timeline-marker.warning { fill: #dc2626; stroke: #dc2626; }
|
|
.timeline-label { font-size: 13px; font-weight: 650; text-anchor: middle; }
|
|
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
|
|
</style>
|
|
</defs>
|
|
<rect class="canvas" width="680" height="1334" />
|
|
<polyline class="edge kind-request style-solid emphasis-normal" points="110.0,229.0 110.0,342.0 191.5,342.0 191.5,455.0" data-evidence="776-781" />
|
|
<rect class="edge-label-bg" x="125.0" y="300.0" width="51.5" height="22" rx="3" />
|
|
<text class="edge-label" x="150.8" y="315.0">동시 도착</text>
|
|
<polyline class="edge kind-blocked style-solid emphasis-normal" points="120.0,979.0 120.0,1102.0 120.0,1102.0 120.0,1225.0" data-evidence="789-794" />
|
|
<rect class="edge-label-bg" x="118.2" y="1088.0" width="51.5" height="22" rx="3" />
|
|
<text class="edge-label" x="144.0" y="1103.0">사용 불가</text>
|
|
<polyline class="edge kind-blocked style-solid emphasis-normal" points="191.5,526.0 191.5,720.5 120.0,720.5 120.0,915.0" data-evidence="789-794" />
|
|
<rect class="edge-label-bg" x="113.2" y="678.5" width="85.0" height="22" rx="3" />
|
|
<text class="edge-label" x="155.8" y="693.5">경쟁 감지 시 삭제</text>
|
|
<g id="node-concurrent">
|
|
<g class="actor-symbol emphasis-primary" data-evidence="776-781"><circle cx="110.0" cy="165.0" r="11.0" /><line x1="110.0" y1="181.0" x2="110.0" y2="200.0" /><line x1="92.0" y1="191.0" x2="128.0" y2="191.0" /><line x1="110.0" y1="200.0" x2="95.0" y2="217.0" /><line x1="110.0" y1="200.0" x2="125.0" y2="217.0" /></g>
|
|
<text class="node-label" x="110.0" y="222.0">동시 refresh 5건</text>
|
|
</g>
|
|
<g id="node-rotation">
|
|
<rect class="node-shape kind-process emphasis-warning role-control" data-evidence="776-781" x="41.5" y="455.0" width="300.0" height="71.0" rx="7" />
|
|
<text class="node-label" x="191.5" y="482.0">회전 검사</text>
|
|
<line class="node-detail-divider" x1="55.5" y1="503.0" x2="327.5" y2="503.0" />
|
|
<text class="node-detail" x="57.5" y="520.0">revokeRefreshToken=true · refreshTokenMaxReuse=0</text>
|
|
</g>
|
|
<g id="node-client-session">
|
|
<rect class="node-shape kind-component emphasis-warning role-target" data-evidence="789-794" x="45.0" y="915.0" width="150.0" height="64.0" rx="7" />
|
|
<text class="node-label" x="120.0" y="945.0">client session</text>
|
|
</g>
|
|
<g id="node-new-token">
|
|
<rect class="node-shape kind-component emphasis-warning role-target" data-evidence="789-794" x="45.0" y="1225.0" width="150.0" height="64.0" rx="7" />
|
|
<text class="node-label" x="120.0" y="1255.0">이긴 요청의 새 토큰</text>
|
|
</g>
|
|
</svg>
|